Paul E. Ayers PWP
General Manager
Business Infrastructure Group
[log in to unmask]
317-254-0816
-----Original Message-----
From: Bradley D. Moore [mailto:[log in to unmask]]
Sent: Tuesday, May 14, 2002 9:23 AM
To: 'Paul Ayers'
Subject: FW: Rejected posting to [log in to unmask]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
As I thought, my attempt to post this message to your listserv was
rejected. So it's up to you to save your list members from
themselves...
Good luck!
(B.)
PS: If you've already deleted the file yourself, just look for it on
another of the Win98 PC's (all of them should have it). Then copy it
to S:\somewhere. From there, you can copy it back to your own PC. I
believe it belongs in C:\WINDOWS\SYSTEM, but you can put it into the
same directory you find it in on another PC (did that make sense?).
Hope that helps!
- -------------------------------------
The worst thing about some men is that
when they are not drunk they are sober.
-- William Butler Yeats
- -------------------------------------
Bradley D. Moore, CNE, CCNE, CCNA
[log in to unmask]
317-331-7168 (W) ~ 317-423-2903 (F)
- -------------------------------------
PGP Public Key: http://www.circlecity.net/brad.moore.asc
PGP Fingerprint: 347D 05BB 56D4 0675 5D2C F3A6 42AA B1B0 F4BD 610B
- -----Original Message-----
From: L-Soft list server at UofT (1.8d)
[mailto:[log in to unmask]]
Sent: Tuesday, May 14, 2002 9:18 AM
To: [log in to unmask]
Subject: Rejected posting to [log in to unmask]
You are not authorized to send mail to the PARKINSN list
from your
[log in to unmask] account. You might be authorized to send
to the list from another of your accounts, or perhaps when using
another mail program which generates slightly different addresses,
but LISTSERV has no way to associate this other account or address
with yours. If you need assistance or if you have any question
regarding the policy of the PARKINSN list, please contact the list
owners: [log in to unmask]
- ------------------------ Rejected message (259 lines)
- -------------------------
Received: from dhcp065-029-073-215.indy.rr.com ([65.29.73.215] EHLO
fletcher.circlecity.net ident: NO-IDENT-SERVICE [port 3999]) by
lserv.utcc.utoronto.ca with ESMTP id <24670-10507>; Tue, 14 May 2002
10:17:31 -0400
Received: from BLUEBOX ([192.168.193.14])
by fletcher.circlecity.net (8.11.6/linuxconf) with ESMTP id
g4EEHRD26212;
Tue, 14 May 2002 09:17:28 -0500
From: "Bradley D. Moore" <[log in to unmask]>
To: "'Paul Ayers'" <[log in to unmask]>
Cc: <[log in to unmask]>
Subject: RE: Fw: Virus Alert from Lloyd
Date: Tue, 14 May 2002 09:17:11 -0500
Message-ID: <000001c1fb52$0d8ed8c0$0ec1a8c0@BLUEBOX>
MIME-Version: 1.0
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3416
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
In-Reply-To: <[log in to unmask]>
Importance: Normal
Return-Path: <[log in to unmask]>
X-Orcpt: rfc822;[log in to unmask]
*** PGP Signature Status: bad
*** Signer: Bradley D. Moore <[log in to unmask]>
*** Signed: 5/14/2002 9:17:10 AM
*** Verified: 5/14/2002 9:19:01 AM
*** BEGIN PGP VERIFIED MESSAGE ***
Heh. You might want to send my comments back out to your list. I've
taken the liberty of CC'ing your list with this reply, but it might
get dropped as I am not myself a list member.
The executable file "jdbgmgr.exe" is the "MicrosoftR Debugger
Registrar for Java." Mine is version 5.0.3805.0. This information
can be verified by RIGHT-clicking on the file and selecting
"Properties" from the pop-up context menu.
While this is not a critical system component, it is also NOT A
VIRUS. Unless the file jdbgmgr.exe has itself been infected with a
virus (see detection instructions below), THERE IS NO REASON TO
DELETE THE FILE.
I remember a few years back someone started a chain hoax like this.
It was more dangerous, as it advocated the removal of kernel32.exe,
THE core executable of the Windows OS.
On the other hand, this program is actually a programming tool for
java (a language used in many interactive web pages). It's removal
MAY have negative impact on system performance, particularly when
confronted with a web page with poorly written java. This debugger
is run automatically when you get a java execution error. Perhaps
you've seen a small box in Internet Explorer that says "Java Runtime
Error," followed by some arcane description and a code segment. If
so, you've seen the debugger in action.
Without the debugger in place (i.e. if you've deleted it per these
instructions), I suppose poorly written java code will simply be
ignored, or fail with an error message less descriptive than normal.
I'm not sure what the result would be, and I'm not going to delete
the file just to find out. 8-)
When you try to delete this file, Windows should warn you about it
being a "registered system component" or some such jargon. I have
yet to see a virus so register itself with Windows, although it's a
clever idea.
Since this is an executable file, it is possible that this file can
become infected WITH a virus. If you suspect this is the case, you
can check it with your favorite virus scanner. First, make sure
you've downloaded the latest virus definitions from the software
developer's web site (Symantec, McAfee, or other). Most virus
scanners tell you right on the main program window what version of
virus definitions it is using. Check this to be sure you are running
up-to-date virus definitions. Once you are satisfied that your
antivirus software is working and up-to-date, use it to scan the
jdbgmgr.exe file. If your antivirus software reports "no virus
found," then you can relax.
This sort of chain-mail hoax is what I like to call the "honor system
virus." Instead of actually infecting your computer with destructive
code in the form of a virus, you are sent an e-mail asking you to
delete system components (a virus-like activity) of your own free
will. Then, rather than read your address books and mail itself to
other computers to infect, you are asked to spread the word and
recommend others delete their system components as well. Much less
programming effort required for this type of virus, as it relies on
built-in failures in PC user logic and understanding.
"You have been infected with the honor system virus. Please delete
all files on drive C: and turn off your computer. Once you are
certain your computer is no longer operational, please drop by your
mom's house and repeat the process."
Anyway, if you've already deleted the jdbgmgr.exe file, you should
refer to support.microsoft.com for information on restoring system
files from your CD-ROM. An upgrade of Internet Explorer (to version
6, if not already done) will also replace this file in its correct
location.
I hope that helps. Good luck getting the word out before your list
members have rid the world of this dreaded system utility. 8-)
(B.)
- -------------------------------------
The worst thing about some men is that
when they are not drunk they are sober.
-- William Butler Yeats
- -------------------------------------
Bradley D. Moore, CNE, CCNE, CCNA
[log in to unmask]
317-331-7168 (W) ~ 317-423-2903 (F)
- -------------------------------------
PGP Public Key: http://www.circlecity.net/brad.moore.asc
PGP Fingerprint: 347D 05BB 56D4 0675 5D2C F3A6 42AA B1B0 F4BD 610B
- -----Original Message-----
From: Paul Ayers [mailto:[log in to unmask]]
Sent: Tuesday, May 14, 2002 8:35 AM
To: [log in to unmask]
Subject: FW: Fw: Virus Alert from Lloyd
Importance: High
Paul E. Ayers PWP
General Manager
Business Infrastructure Group
[log in to unmask]
317-254-0816
- -----Original Message-----
From: Parkinson's Information Exchange Network
[mailto:[log in to unmask]]On Behalf Of Emily and Julian
Brinac
Sent: Tuesday, May 14, 2002 8:18 AM
To: [log in to unmask]
Subject: Re: Fw: Virus Alert from Lloyd
Importance: High
Can anyone confirm this? I did get teddy bear with the name jdbgmgr
WITHOUT exe extension. I was warn by the system not to delete it as
this is a program which is necessary for windows to run. Emily
- ----- Original Message -----
From: "Marie Seymour" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Tuesday, May 14, 2002 8:20 AM
Subject: Fw: Virus Alert from Lloyd
> SORRY, I GOT THIS VIRUS SO I AM TRYING TO ALERT EVERYONE IN MY
> ADDRESS
BOOK.
> I THOUGHT THERE WAS NO WAY I COULD HAVE GOTTEN IT, BUT I CHECKED
> AND
THERE IT WAS.
> ----- Original Message -----
> From: Les Seymour
> To: Trish Evans ; Sally Millwood ; Marissa Hudson ; Marie Seymour ;
Marcia Purcell ; Linda Poe ; Helen Heaton ; Doug Smith ; Chris
Allison ; Charles Crook ; Carroll Clark ; Beth Large ; Benjamin Folk
; Arlan Hawkins
> Sent: Monday, May 13, 2002 8:00 AM
> Subject: Fw: Virus Alert from Lloyd
>
>
> found it on mine
> ----- Original Message -----
> From: [log in to unmask]
> To: [log in to unmask]
> Sent: Sunday, May 12, 2002 3:07 PM
> Subject: Virus Alert from Lloyd
>
>
> Good Morning,
>
> I just received this from a friend and I did have the file and have
deleted it. You should follow these instructions to check to see if
you have it also.
>
> If you do also, simply follow the instructions pasted here and then
send to your address book ASAP.
>
>
>
> Lloyd Wilson
>
>
>
> It has been brought to my attention that a computer here at the
Service center had a virus named jdbgmgr.exe, which is neither
detected by Norton nor McAfee. It was passed on to the rest of us
and in return it was passed on to everyone in each of our address
books. Unfortunately it was on my hard drive which means it is
probable that is it on yours.
>
> Please check and verify if you have this virus. The virus attacks
> all
of the contacts in your address book. This particular virus remains
in your computer's system for 14 days before it erases your files.
>
> To delete and eliminate it completely, please do the following
immediately:
>
> 1. Go to START -> FIND-> FILES OR FOLDERS
>
> 2. Under NAMED, type jdbgmgr.exe and click FIND NOW. Make sure it's
looking in the C: drive.
> Please do not click it if it does comes up.
>
> 3. If the virus appears, the icon will be a teddy bear with the
> name
jdbgmgr.exe.
>
> 4. Again, please do not open it...................Right click on it
and DELETE it. It will then be sent to the
> recycle bin.
>
> 5. When it disappears, please go to the recycle bin and delete it
> from
there as well!!!
>
> Empty the Recycle Bin under ----------File ->Empty Recycle Bin
>
> If you find the virus on your system, please send this message to
> all
on your address book because the program automatically sends to
everyone in your book.
>
> I am really sorry for the inconvenience. Hope everyone has a great
day!!!!
>
> Joilynn R. Garcia
>
> Program Technician
>
> USDA Valencia-Cibola FSA County Office
>
> --------------------------------------------------------------------
> -- To sign-off Parkinsn send a message to:
mailto:[log in to unmask]
> In the body of the message put: signoff parkinsn
>
- ----------------------------------------------------------------------
To sign-off Parkinsn send a message to:
mailto:[log in to unmask]
In the body of the message put: signoff parkinsn
*** END PGP VERIFIED MESSAGE ***
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>
iQA/AwUBPOEd0kKqsbD0vWELEQKYGwCglVLxMG52sltJIQgy1hIs6Elai+AAoMRy
j9ocVCs/B2uSF1iDvLHmJHZj
=Tyuy
-----END PGP SIGNATURE-----
----------------------------------------------------------------------
To sign-off Parkinsn send a message to: mailto:[log in to unmask]
In the body of the message put: signoff parkinsn
